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In  September  2007,  more  than  65  subject  matter  experts  from 

around  the  Air  Force  gathered  at  the  US  Air  Force  Academy  to  dis¬ 
cuss  the  way  ahead  for  institutionalizing  cyber  training  and  force 
development.1  This  occasion  followed  the  establishment  of  a  provi¬ 
sional  Air  Force  Cyber  Command  (AFCYBER)  (a  major  command)  in 
November  2006,  which  itself  followed  the  Air  Force's  incorporation  of 
cyberspace  into  its  mission  statement  less  than  a  year  prior.  Cyber 
power  advocates  of  the  decade  leading  up  to  this  point  were  finally 
building  momentum  for  establishing  cyberspace  as  a  fully  recognized 
war-fighting  domain.  Unfortunately,  these  victories  came  at  a  cost— a 
fact  that  started  to  become  evident  at  the  2007  conference.2 

Conference  organizers  showed  participants  the  definition  of  cyber¬ 
space  adopted  by  the  Department  of  Defense  (DOD)  in  its  National 
Military  Strategy  for  Cyberspace  Operations,  published  in  2006:  “A  domain 
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characterized  by  the  use  of  electronics  and  the  electromagnetic  spec¬ 
trum  to  store,  modify,  and  exchange  data  via  networked  systems  and 
associated  physical  infrastructures.”3  They  also  described  the  outline 
of  the  Air  Force's  plan  for  structuring  the  cyber  career  held,  with  two 
primary  cyber  "shredouts”  for  computer  network  operators  and  combat 
systems  (electronic  warfare  [EW])  officers.4  Almost  immediately,  this 
revelation  led  to  some  uncomfortable  questions  and  awkward  implica¬ 
tions.  Why  had  the  service  placed  two  vastly  different  career  fields  into 
a  single  training  pipeline?  Does  radar  jamming  belong  to  the  same 
class  of  warfare  as  computer  network  “hacking”?  Does  this  mean  we 
should  consider  the  airborne  laser  part  of  cyber  warfare  since  it  uti¬ 
lizes  the  electromagnetic  spectrum  (EMS)?  The  participants,  experi¬ 
enced  Airmen  who  hailed  from  both  sides  of  the  divide,  asked  these 
and  other  questions,  leaving  them  largely  unanswered. 

Fortunately,  both  the  DOD  and  Air  Force  have  since  corrected  or  de- 
emphasized  most  of  the  aforementioned  problems  underlying  this 
framework,  albeit  not  without  substantial  upheaval.  Fess  than  two 
years  after  publication  of  the  definition  of  cyberspace  in  the  National 
Military  Strategy  for  Cyberspace  Operations,  the  DOD  updated  it  to  a 
more  focused  and  practical  foundation  for  doctrine:  “A  global  domain 
within  the  information  environment  consisting  of  the  interdependent 
network  of  information  technology  infrastructures,  including  the  Inter¬ 
net,  telecommunications  networks,  computer  systems,  and  embedded 
processors  and  controllers.”5  Shortly  thereafter,  the  Air  Force  down¬ 
graded  the  provisional  AFCYBER  major  command  to  a  numbered  air 
force  subordinated  to  the  new  US  Cyber  Command  subunified  com¬ 
mand,  and  never  fully  incorporated  combat  systems  officers  into  its 
cyber  career  held.6  For  the  most  part,  the  service  dropped  the  explicit 
focus  on  the  EMS  and  physical  characteristics. 

The  efforts  of  early  cyber  power  advocates  to  draw  attention  and  re¬ 
sources  to  cyberspace  as  a  military  operational  domain  have  borne 
fruit  in  recent  years.7  However,  the  body  of  theory  and  doctrine  that 
developed  was  arguably  influenced  (possibly  unconsciously)  by  the 
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very  process  of  struggling  to  overcome  conservative  resistance.  Recur¬ 
rent  themes  attempt  to  portray  cyberspace  as  more  comfortably  analo¬ 
gous  to  the  traditional  domains  of  land,  sea,  air,  and  space.  In  addition 
to  highlighting  its  physical  characteristics,  current  doctrine  transfers 
basic  principles  and  tenets  from  other  operational  domains  to  cyber¬ 
space,  apparently  assuming,  without  careful  consideration,  their  appli¬ 
cability  to  the  new  context.  (The  article  examines  some  examples  of 
this  practice  later  on.) 

Cyberspace  unquestionably  has  a  physical  element  that  carries  with 
it  certain  war-fighting  implications,  and  many  fundamental  principles 
of  war  will  undoubtedly  apply  to  cyber  war.  However,  the  approach  is 
flawed,  in  that  the  doctrine  appears  to  look  for  ways  to  prove  that  "cy¬ 
berspace  is  like  other  domains”  instead  of  fully  accounting  for  its 
unique  properties.  Rather  than  continually  focus  on  the  relatively 
mundane  physical  elements  of  cyberspace,  military  thinkers  should 
embrace  its  unique  logical  or  virtual  nature  and  consider  its  implica¬ 
tions.  Understanding  the  uniqueness  of  cyberspace  provides  founda¬ 
tional  clarity  of  thought  towards  extending  domain-specific  theory  and 
formulating  doctrine. 


Cyberspace  as  a  Physical  Domain 

Early  attempts  to  describe  cyberspace  as  an  operational  domain 
tended  to  emphasize  its  grounding  in  the  physical  world  as  a  defining 
characteristic.  Again,  this  is  understandable  since  theorists  were  at¬ 
tempting  to  establish  cyberspace  as  a  domain  on  par  with  land,  sea, 
air,  and  space— all  domains  within  the  physical  world.  Proponents 
sought  to  carve  out  their  own  slice  of  the  same  physical  universe  in  or¬ 
der  to  place  cyberspace  fully  alongside  the  other  traditional  domains. 

In  his  seminal  work  Strategic  Warfare  in  Cyberspace,  one  of  the  most 
influential  early  studies  of  cyber  warfare,  Col  Gregory  Rattray,  USAF, 
retired,  cautioned  against  treating  cyberspace  as  a  purely  virtual  envi¬ 
ronment:  "Cyberspace  ...  is  actually  a  physical  domain  resulting  from 
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the  creation  of  information  systems  and  networks”  (emphasis  in  origi¬ 
nal).8  Clearly,  cyberspace  has  a  physical  manifestation  in  the  form  of 
the  electronic  devices  used  to  communicate,  and  Colonel  Rattray  was 
not  misguided  in  reminding  information  warriors  not  to  discount  phys¬ 
ical  interactions  with  cyberspace.  However,  this  argument  alone  did 
not  convince  individuals  who  sought  to  elevate  cyberspace  to  a  full- 
fledged  war-hghting  domain.  After  all,  no  other  domain  was  defined  by 
the  equipment  used  to  operate  within  it.  This  ultimately  led  to  co-opting 
the  EMS  as  the  physical  representation  of  cyberspace. 

Dr.  Daniel  Kuehl  of  the  National  Defense  University— a  longtime  ad¬ 
vocate  of  linking  cyberspace  closely  to  the  EMS  (he  referred  to  such  a 
relationship  as  early  as  1997)— went  on  to  have  "a  major  role  in  the 
crafting”  of  the  DOD’s  definition  of  cyberspace  in  2006. 9  Frequently 
cited,  he  continues  to  advocate  this  physical-centric  definition  of  cy¬ 
berspace  in  papers  and  guest  lectures.  Possibly  reflecting  this  early  in¬ 
fluence  and  desire  to  legitimize  cyberspace,  the  Air  Force  Cyberspace 
Thsk  Force  of  2006  proposed  a  “Cyber  Creed,”  which  stated,  among 
other  things,  that  “cyber  is  a  war-fighting  domain.  The  electromagnetic 
spectrum  is  the  maneuver  space”  (emphasis  in  original).10 

Assigning  the  EMS  to  cyberspace  is  appealing  for  a  number  of  rea¬ 
sons.  First  and  foremost,  this  spectrum  represents  a  pervasive,  well- 
defined  phenomenon  in  the  physical  world,  seemingly  qualified  to  sit 
at  the  same  table  with  the  other  physical  domains.  Most  digital  com¬ 
munications,  which  intuitively  seem  to  belong  to  cyberspace  (if  any¬ 
thing  does),  are  carried  on  radio  waves,  microwaves,  or  lasers  (either 
wirelessly  or  by  fiber-optic  cable),  all  of  which  belong  to  the  EMS.  Us¬ 
ing  this  as  a  starting  point,  one  finds  that  allowing  the  definition  of  cy¬ 
berspace  to  stretch  to  include  things  like  radar  (an  information  system 
of  sorts)  and,  with  that,  electronic  countermeasures,  does  not  appear 
wholly  unreasonable.  Suddenly,  cyberspace  attains  an  entirely  new 
level  of  credibility  in  the  mind  of  the  traditional  war  fighter  if  it  can 
claim  the  relatively  venerable,  proven,  and  effective  held  of  EW  as  its 
own.  Given  the  push  to  establish  cyberspace  as  a  new  domain,  one  can 
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easily  understand  why  the  DOD  initially  adopted  Kuehl’s  physical  defi¬ 
nition  of  cyberspace. 

However,  this  approach  quickly  encounters  difficulties.  If  radar  be¬ 
longs  to  cyberspace,  then  why  not  sonar?  After  all,  it  serves  essentially 
the  same  purpose— broadly  speaking— but  does  not  leverage  the  EMS 
in  any  meaningful  way.  The  airborne  laser  is  also  problematic  for  the 
opposite  reason  because  it  relies  almost  completely  on  the  EMS  to  cre¬ 
ate  effects,  but  any  definition  of  cyberspace  that  includes  laser  weap¬ 
ons  would  be  too  broad  and  thus  nearly  useless  for  any  practical  pur¬ 
pose.  Virtually  all  intelligence,  surveillance,  and  reconnaissance; 
tactical  sensors;  and  the  human  eye  depend  upon  the  EMS. 

Although  we  can  largely  characterize  cyberspace  (however  we 
choose  to  define  it)  by  the  use  of  electronics  and  the  EMS,  doing  so 
creates  some  practical  problems  doctrinally.  Associating  the  EMS  with 
cyberspace  leads  to  gathering  EW  and,  potentially,  directed  energy  op¬ 
erations  under  the  same  umbrella  as  computer  network  operations. 
This  results  in  managing  wholly  disparate,  highly  specialized  skill  sets 
under  one  structure  despite  their  having  little  to  no  commonality  in 
training  and  doctrine.  Furthermore,  from  a  theoretical  and  doctrinal 
standpoint,  electronics  and  the  EMS  are  largely  irrelevant  in  conceptu¬ 
ally  defining  cyberspace,  and  their  inclusion  distracts  from  the  truly 
defining  characteristics  of  cyberspace. 

Circumscribing  cyberspace  in  terms  of  its  use  of  electronics  and  the 
EMS  may  seem  intuitively  obvious,  but  it  remains  a  rather  superficial 
way  to  describe  the  domain.  After  all,  if  cyberspace  primarily  lever¬ 
aged  quantum  effects  to  process,  store,  and  exchange  information, 
would  it  not  still  be  fundamentally  the  same  from  an  operational  per¬ 
spective?  The  physical  mechanisms  used  by  the  technology  employed 
in  cyberspace  to  produce  effects  are  not  defining  characteristics  of  the 
domain— no  more  so  than  tanks  and  artillery  are  defining  characteris¬ 
tics  of  the  land  domain.11 

Now  that  cyberspace  has  been  successfully  established  as  a  serious 
military  concern,  forced  analogies  to  other  domains  have  largely  out- 
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lived  their  usefulness  in  advancing  cyberspace  theory  and  doctrine.  As 
noted  before,  the  DOD  and  Air  Force  have  moved  away  from  a  physi¬ 
cally  oriented  model  of  cyberspace,  as  evidenced  by  the  implementa¬ 
tion  of  their  new  definitions,  organization,  and  processes.  We  no  lon¬ 
ger  treat  EW  as  part  of  cyberspace,  and  we  base  training  and  force 
development  on  a  computer-network-centric  view  of  the  domain.12 
The  nascent  Air  Force  cyber  warfare  career  held  consists  primarily  of 
former  communications  personnel.13  Cyber  warfare  doctrine  and 
thinking  appear  to  be  getting  on  the  right  track. 

Unfortunately,  considerable  inertia  still  accompanies  the  old  models 
of  describing  cyberspace— an  understandable  situation,  given  their  ap¬ 
peal  to  traditional  military  sensibilities.  Recent  papers  continue  to  re¬ 
fer  to  and  emphasize  physical  aspects  of  cyberspace  that  have  little  or 
no  practical  bearing  above  a  technical  or  tactical  level,  despite  ostensi¬ 
bly  attempting  to  formulate  domain-specific  theory.  In  2009  one  such 
treatise  on  the  Chinese  cyber  threat  explicitly  took  issue  with  the  up¬ 
dated  (2008)  DOD  definition  of  cyberspace,  calling  back  to  the  old 
physically  oriented  model  by  observing  that  cyberspace  must  also  "en¬ 
compass  not  only  the  actual  military  and  civil  electronics  devices,  but 
also  the  electromagnetic  spectrum  on  which  the  information  .  .  .  trav¬ 
els.”14  The  author  goes  on  to  stress  that  "strictly  independent  [computer 
network  operations],  Electronic  Warfare  (EW),  and  Space  Operations 
[would]  instead  be  incorporated  within  the  overarching  and  ethereal, 
but  'physical,'  domain  of  Cyberspace.  Not  dissimilar  to  the  domains  of 
Land,  Sea,  and  Air.”15  In  2011  an  article  in  Joint  Force  Quarterly  explicitly 
referred  to  "cyberspace  (that  is,  the  electromagnetic  spectrum).”16  Even 
Air  Force  Doctrine  Document  (AFDD)  3-12,  Cyberspace  Operations 
(2010),  still  shows  the  residue  of  overemphasizing  the  EMS  although  it 
follows  the  DOD’s  lead  by  stopping  well  short  of  equating  the  two.17 

Undue  emphasis  on  the  physical  aspects  of  cyberspace  could  impair 
clear  insights  by  diffusing  or  artificially  circumscribing  the  domain, 
thus  potentially  deflecting  more  profitable  lines  of  thought.  Dr.  Samuel 
Liles,  associate  professor  at  the  National  Defense  University,  argues 
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that  “focusing  on  one  aspect  of  cyberspace  (EMS)  creates  a  strategic 
and  conceptual  blind  spot  to  leadership.  It  also  has  a  tendency  to  focus 
consideration  of  risk  via  threats  and  vulnerabilities  on  transmission 
mechanisms.”18  Accordingly,  continued  propagation  of  a  physically  ori¬ 
ented  paradigm  of  cyberspace  reinforces  these  flawed  viewpoints  in 
the  academic  and,  to  some  extent,  operational  communities.  Cyber¬ 
space  clearly  has  a  physical  element,  but  the  implications  are  rela¬ 
tively  obvious,  falling  cleanly  within  existing  doctrine  for  physical  at¬ 
tack,  EW,  and  other  well-worn  disciplines.  However,  cyberspace  differs 
fundamentally  from  other  operational  domains  in  a  number  of  ways 
that  sometimes  defy  attempts  to  apply  established  military  principles. 

Identifying  the  truly  meaningful,  unique  characteristics  of  warfare 
in  cyberspace  will  help  focus  the  minds  of  theoreticians,  allowing 
them  to  make  more  efficient  progress  in  the  held  by  determining  how 
cyber  warfare  substantively  departs  from  established  theory  and  doc¬ 
trine.  Thus,  they  can  also  clarify  the  principles  of  this  relatively  new 
and  unfamiliar  operational  domain  for  the  strategist  and  commander, 
helping  them  make  more  intuitive  decisions  as  they  operate  within  it. 


The  Unique  Character  of  Cyberspace 

The  ability  to  process,  store,  and  exchange  large  amounts  of  informa¬ 
tion  rapidly,  using  automated  systems,  is  the  defining  characteristic  of 
cyberspace— the  physical  methods  are  superficial.  In  fact,  its  logical  or 
virtual  nature,  rather  than  its  physical  mechanisms,  sets  cyberspace 
apart  from  other  domains.  This  characteristic  leads  to  a  number  of  im¬ 
plications,  some  more  obvious  than  others. 

Perhaps  the  most  often-cited  distinguishing  attribute  of  operating  in 
cyberspace  is  its  speed.19  Indeed,  the  observation  that  cyber  warfare 
takes  place  “(almost)  at  the  speed  of  light”  has  become  a  cliche.  For 
most  purposes,  physical  distances  in  cyberspace  are  almost  meaning¬ 
less-only  logical  topology  matters.  Planning  and  preparing  for  an  at¬ 
tack  may  take  weeks  or  more  to  develop  the  necessary  intelligence 


January-February  2013 


Air  &  Space  Power  Journal  |  50 


Cyber  Focus 


W  Feature 


Butler 


Refocusing  Cyber  Warfare  Thought 


and  accesses,  but,  once  launched,  the  strike  may  well  be  over  in  a  mat¬ 
ter  of  seconds.  Consequently,  in  many  cases  we  may  not  realistically 
be  able  to  react  to  an  attack  in  progress.  Often,  a  defender  can  do  noth¬ 
ing  more  than  deny  the  most  damaging  avenues  of  attack  in  advance, 
enable  detection,  and  respond  quickly  to  mitigate  and  remediate  its  ef¬ 
fects.  A  head-to-head  confrontation  between  offensive  and  defensive 
forces  in  real  time  rarely  occurs. 

This  brings  up  another  interesting  point.  Cyber  war  is  unusual  in  the 
sense  that  offensive  and  defensive  forces  are  highly  asymmetrical, 
compared  to  those  in  other  domains.20  Defensive  forces  primarily  in¬ 
clude  system  administrators  who  oversee  various  networks,  response 
teams  that  quickly  perform  forensics  and  remediation,  intrusion  detec¬ 
tion  analysts,  and  so  forth,  perhaps  along  with  software  developers 
who  hurriedly  patch  newly  discovered  flaws,  and  private  antivirus 
companies  that  develop  signatures  to  inoculate  systems  to  new  mal¬ 
ware.21  Meanwhile,  highly  specialized  offensive  forces  use  almost  en¬ 
tirely  different  tools  to  attack  networks,  often  attempting  to  remain  un¬ 
detected  for  the  duration  of  the  operation.  TWo  opposing  offensive 
cyber  forces  do  not  meet  in  cyberspace  to  wage  battle,  as  in  other  "ki¬ 
netic”  domains;  even  if  they  did,  the  participants  do  not  find  them¬ 
selves  at  physical  risk— a  fact  that  complicates  efforts  to  erode  an  en¬ 
emy's  capacity  to  wage  cyber  war.22 

In  Cyberdeterrence  and  Cyberwar,  RAND's  Martin  Libicki  explains  in 
detail  the  difficulty  or  impossibility  of  disarming  an  enemy’s  cyber  ca¬ 
pabilities:  "Indeed,  since  hackers  need  only  an  arbitrary  computer  and 
one  network  connection,  it  is  not  clear  that  even  a  physical  attack 
could  destroy  a  state's  cyberattack  capabilities.”23  A  state's  most  irre¬ 
placeable  offensive  assets  in  a  cyber  war  are  its  talented  hackers  and 
its  stockpile  of  exploits.  The  state  can  keep  both  of  them  well  protected 
from  physical  and  cyber  attack  unless  it  becomes  so  overwhelmed  that 
the  war's  outcome  is  no  longer  in  doubt.  Even  the  generally  expend¬ 
able  computer  systems  used  by  a  state's  cyber  force  are  difficult  to 
hold  at  risk  through  cyber  means  since  they  can  be  hardened  much 
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more  effectively  than  a  typical  workstation  or  server  without  sacrific¬ 
ing  functionality;  moreover,  an  assailant  likely  would  have  difficulty 
pinpointing  them  on  the  network  in  the  first  place.  A  combination  of 
physical  and  flooding  attacks  to  sever  a  state  completely  from  the  In¬ 
ternet  could  theoretically  deny  its  cyber  forces  an  attack  avenue  (if 
they  cannot  covertly  relocate  physically  to  an  ally  or  unknowing  third 
party).  Doing  so,  however,  would  produce  a  reciprocal  effect  by  pre¬ 
venting  attackers  from  penetrating  the  enemy's  networks. 

All  of  this  implies  that  “offensive  counter  cyberspace,”  a  term  pre¬ 
sented  without  comment  in  AFDD  3-12,  may  prove  meaningless  or  at 
least  radically  different  from  offensive  counterair  (OCA),  after  which  it 
is  clearly  modeled.24  Although  the  standard  definition  of  OCA  is  rather 
broad  (and  could  be  construed  to  include  cyber,  at  least  to  some  ex¬ 
tent),  we  commonly  think  of  it  in  terms  of  diminishing  an  adversary's 
offensive  air  capability  through  application  of  our  own  airpower.25  As 
discussed  above,  we  may  not  realistically  expect  to  substantially  dimin¬ 
ish  an  adversary's  offensive  cyber  capability  through  offensive  cyber 
means  alone  (or  even  by  kinetic  means).  This  does  not  mean  that  of¬ 
fensive  cyber  capability  is  useless— merely  that  these  particular  oppos¬ 
ing  forces  may  not  significantly  affect  each  other,  at  least  not  directly 
or  in  ways  suggested  by  OCA. 

Not  only  do  offensive  cyber  forces  remain  immune  to  attack,  for  the 
most  part,  but  also  the  defensive  forces  can  easily  grow  stronger  over 
the  course  of  a  cyber  war,  even  if  it  is  going  badly.  Specifically,  net¬ 
work  attacks  reveal  vulnerabilities  that  allow  defenders  to  patch  or  oth¬ 
erwise  mitigate  these  offensive  avenues  so  that  the  same  enemy  tools 
may  not  work  for  very  long.  As  Libicki  puts  it,  an  “attacker  will  find  it 
continually  harder  to  hit  similar  targets  because  they  harden  as  they 
recover  from  each  new  attack.”26  Thus,  “cyber  weapons”  are  highly  per¬ 
ishable  but  relatively  slow  and  costly  to  develop,  so  the  potential  for 
attack  may  diminish  over  the  course  of  a  war.27 

Meanwhile,  a  commander  generally  does  not  have  to  accept  greater 
vulnerability  in  order  to  “mass  forces”  elsewhere.  Since  offensive 
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forces  are  probably  separate  and  distinct  from  defensive  forces,  in  cy¬ 
berspace  we  do  not  need  to  consider  how  to  allocate  combat  capability 
to  “cover  flanks”  or  trade  off  offensive  firepower  to  ensure  the  security 
of  lines  of  communication  and  rear  areas.  All  of  these  factors  combine 
to  suggest  that  attrition  may  not  exist  in  cyber  warfare,  at  least  not  in 
the  classic  sense. 

If  cyber  forces  cannot  realistically  perform  counterforce  missions 
within  their  own  domain,  then  the  Air  Force  must  change  the  way  it 
approaches  wartime  objectives  in  cyberspace  versus  the  air.  According 
to  AFDD  3-01,  Counterair  Operations,  “Control  of  the  air  is  normally 
one  of  the  first  priorities  of  the  joint  force.  This  is  especially  so  when¬ 
ever  the  enemy  is  capable  of  threatening  friendly  forces  from  the  air 
or  inhibiting  a  joint  force  commander’s  (JFC's)  ability  to  conduct  op¬ 
erations.”28  Replacing  “the  air”  with  “cyberspace”  in  this  passage  reveals 
how  Airmen  could  draw  an  easy  parallel  and  come  to  the  conclusion 
that  cyber  forces  must  prioritize  attaining  “cyberspace  superiority.” 
This  may  be  possible  in  some  sense,  but  it  may  simply  mean  being 
better  at  attack  and  defense  than  the  enemy.  This  statement  is  not 
quite  as  vacuous  as  it  may  seem  at  first  blush. 

We  do  not  secure  “control  of  cyberspace”  by  conducting  cyber  opera¬ 
tions  against  the  adversary  to  weaken  his  capabilities  while  protecting 
our  own;  rather,  we  field  a  capable,  well-trained,  and  well-resourced 
force,  relative  to  the  adversary's.  Thus,  such  control  is  no  longer  an 
operational  objective  but  something  largely  determined  at  the  outset 
of  hostilities,  a  result  of  strategic  planning  and  preparation  during 
peacetime.  If  we  engage  in  a  cyber  war  with  inferior  forces,  we  cannot 
depend  upon  superior  tactics  to  outmaneuver  the  opponent,  inhict 
greater  losses,  and  turn  the  tide  (for  various  reasons  described  above). 
Thus,  “cyber  superiority”  has  little  use  as  a  doctrinal  term  because  it  is 
not  something  that  we  design  campaigns  to  attain.  Instead,  it  is  a 
shallow  descriptor  of  the  relative  quality  of  forces  on  which  commanders 
will  exert  little  influence  in  wartime.  If  the  enemy  clearly  derives  sub¬ 
stantially  greater  military  benefit  from  cyberspace  (i.e.,  has  “superiority"), 
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a  commander  may  have  only  one  major  lever  available:  Take  cyber¬ 
space  “out  of  play”  to  an  extent,  either  by  isolating  bis  or  her  forces 
from  the  Internet  or  by  doing  the  same  to  the  adversary  through 
physical  (or  even  logical)  attack— obviously  a  drastic  measure  and 
easier  said  than  done. 


Conclusion 

As  a  war-fighting  environment,  cyberspace  differs  fundamentally 
from  the  traditional  physical  domains,  primarily  due  to  its  logical/vir- 
tual  nature.  It  requires  as  much  of  a  reexamination  of  basic  principles 
as  did  air,  relative  to  land  and  sea  warfare.  This  unique  character  chal¬ 
lenges  many  assumptions  about  waging  war.  If  we  cannot  (directly)  ap¬ 
ply  such  elementary  concepts  as  attrition  or  counterforce  to  cyber 
warfare,  then  we  should  be  cautious  about  trying  to  force  other  prin¬ 
ciples  of  warfare  into  cyber  doctrine. 

Few,  if  any,  strong  examples  of  “cyber  war”  exist  from  which  we  can 
draw  combat-proven  lessons  learned.29  Consequently,  individuals  who 
craft  new  doctrine  will  naturally  gravitate  to  the  tried  and  true  in  other 
domains  and  attempt  to  graft  those  bits  of  wisdom  to  this  new  arena. 
However,  even  if  we  can  rationalize  a  way  to  link  cyber  operations  to 
some  venerated  theoretical  framework,  doing  so  may  prove  pointless 
if  it  yields  no  greater  insight  into  waging  war  effectively.  Rather  than 
ask  ourselves  how  a  certain  tenet  applies  to  cyber,  we  should  first  in¬ 
quire  about  whether  it  pertains  to  cyber  in  any  meaningful  way.  Only 
by  honestly  assessing  the  idiosyncrasies  of  cyberspace  can  we  usefully 
apply  established  wisdom  and  forge  ahead  with  new  doctrine.  © 
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